CVE-2020-12116

7.5

HIGH

Zoho ManageEngine OpManager File Disclosure Vulnerability

Description

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request.

INFO

Published Date :

May 7, 2020, 8:15 p.m.

Last Modified :

July 21, 2021, 11:39 a.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

3.6

Exploitability Score :

3.9 Public PoC/Exploit Available at Github

CVE-2020-12116 has a 14 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2020-12116 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product	Action
1	Zohocorp	manageengine_opmanager

: Total Affected Vendor : 1 | Products : 1

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-12116.

URL	Resource
https://www.manageengine.com/network-monitoring/help/read-me-complete.html	Vendor Advisory
https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125	Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

HimmelAward/Goby_POC

在公网收集的gobypoc+部分自己加的poc

Updated: 2 months, 2 weeks ago

96 stars 5 fork 5 watcher

Born at : July 28, 2023, 4:28 p.m. This repo has been linked 296 different CVEs too.

merlinepedra/nuclei-templates

None

Updated: 2 years, 4 months ago

0 stars 0 fork 0 watcher

Born at : July 6, 2022, 8:40 a.m. This repo has been linked 157 different CVEs too.

merlinepedra25/nuclei-templates

None

Updated: 3 months, 1 week ago

0 stars 0 fork 0 watcher

Born at : July 6, 2022, 8:40 a.m. This repo has been linked 153 different CVEs too.

soosmile/POC

None

Updated: 4 months, 3 weeks ago

8 stars 1 fork 1 watcher

Born at : June 21, 2022, 7:45 a.m. This repo has been linked 943 different CVEs too.

retr0-13/Goby

None

Updated: 2 years, 8 months ago

0 stars 0 fork 0 watcher

Born at : March 10, 2022, 7:04 a.m. This repo has been linked 24 different CVEs too.

Elsfa7-110/kenzer-templates

None

Python XSLT

Updated: 3 months ago

17 stars 5 fork 5 watcher

Born at : May 22, 2021, 4:29 p.m. This repo has been linked 349 different CVEs too.

developer3000S/PoC-in-GitHub

None

Updated: 8 months, 2 weeks ago

33 stars 3 fork 3 watcher

Born at : March 12, 2021, 12:22 p.m. This repo has been linked 1063 different CVEs too.

sobinge/nuclei-templates

Customized templates originally pulled from `projectdiscovery/nuclei-templates`

Python

Updated: 4 months, 4 weeks ago

5 stars 0 fork 0 watcher

Born at : March 11, 2021, 1:56 a.m. This repo has been linked 174 different CVEs too.

alphaSeclab/sec-daily-2020

2020年发布到阿尔法实验室微信公众号的所有安全资讯汇总

Updated: 2 months, 3 weeks ago

40 stars 16 fork 16 watcher

Born at : Jan. 11, 2021, 2:08 a.m. This repo has been linked 189 different CVEs too.

hectorgie/PoC-in-GitHub

None

Updated: 1 year, 3 months ago

17 stars 10 fork 10 watcher

Born at : Jan. 2, 2021, 10:19 p.m. This repo has been linked 1050 different CVEs too.

0xT11/CVE-POC

None

Updated: 3 months, 1 week ago

82 stars 32 fork 32 watcher

Born at : Oct. 2, 2020, 2:49 p.m. This repo has been linked 1111 different CVEs too.

ARPSyndicate/kenzer-templates

essential templates for kenzer [DEPRECATED]

kenzer vulnerabilities kenzer-templates arpsyndicate

Python Shell Ruby

Updated: 3 months, 1 week ago

106 stars 32 fork 32 watcher

Born at : Sept. 18, 2020, 9:03 p.m. This repo has been linked 1653 different CVEs too.

BeetleChunks/CVE-2020-12116

Proof of concept code to exploit CVE-2020-12116: Unauthenticated arbitrary file read on ManageEngine OpManger.

Python

Updated: 1 year, 3 months ago

33 stars 12 fork 12 watcher

Born at : May 8, 2020, 3:56 p.m. This repo has been linked 1 different CVEs too.

gobysec/Goby

Attack surface mapping

vulnerability-research scan-tool security security-tools hacking networking portscanning cve exp pentesting exploit red-team proxyshell cve-2023-22527 cve-2024-0204 cve-2024-20931 cve-2024-21887 cve-2024-21893 cve-2024-23897 cve-2024-25600

Updated: 2 months, 2 weeks ago

1388 stars 148 fork 148 watcher

Born at : June 3, 2019, 7:56 a.m. This repo has been linked 24 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-12116 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-12116 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

CVE Modified by [email protected]

May. 14, 2024

Action	Type	Old Value	New Value

CWE Remap by [email protected]

Jul. 21, 2021

Action	Type	Old Value	New Value
Changed	CWE	CWE-200	CWE-22

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125123::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125123::::::*

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125124::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125124::::::*

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125117::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125117::::::*

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125118::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125118::::::*

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125120::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125120::::::*

CPE Deprecation Remap by [email protected]

Jun. 22, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125121::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125121::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125101::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125101::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125102::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125102::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125108::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125108::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125110::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125110::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125000::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125000::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125002::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125002::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125100::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125100::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125116::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125116::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125111::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125111::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125112::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125112::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125113::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125113::::::*

CPE Deprecation Remap by [email protected]

May. 06, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125114::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125114::::::*

CPE Deprecation Remap by [email protected]

May. 04, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124013::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124013::::::*

CPE Deprecation Remap by [email protected]

May. 04, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124014::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124014::::::*

CPE Deprecation Remap by [email protected]

May. 04, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124011::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124011::::::*

CPE Deprecation Remap by [email protected]

May. 04, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124012::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124012::::::*

CPE Deprecation Remap by [email protected]

May. 04, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124000::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124000::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124191::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124191::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124101::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124101::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124102::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124102::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124168::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124168::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124169::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124169::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124097::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124097::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124098::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124098::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124099::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124099::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124100::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124100::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124182::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124182::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124183::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124183::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124189::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124189::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124190::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124190::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124175::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124175::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124176::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124176::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124178::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124178::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124181::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124181::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124089::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124089::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124095::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124095::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124096::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124096::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124069::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124069::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124070::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124070::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124066::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124066::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124067::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124067::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124058::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124058::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124065::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124065::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124054::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124054::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124056::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124056::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124086::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124086::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124087::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124087::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124082::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124082::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124085::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124085::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124075::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124075::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124081::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124081::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124071::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124071::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124074::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124074::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124030::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124030::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124033::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124033::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124026::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124026::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124027::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124027::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124024::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124024::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124025::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124025::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124022::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124022::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124023::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124023::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124051::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124051::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124053::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124053::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124042::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124042::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124043::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124043::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124040::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124040::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124072::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124072::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124041::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124041::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124037::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124037::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124039::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124039::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124015::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124015::::::*

CPE Deprecation Remap by [email protected]

Apr. 29, 2021

Action	Type	Old Value	New Value
Changed	CPE Configuration	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124016::::::*	OR cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:build124016::::::*

Initial Analysis by [email protected]

May. 12, 2020

Action	Type	Old Value	New Value
Added	CVSS V2		NIST (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Added	CVSS V3.1		NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Changed	Reference Type	https://www.manageengine.com/network-monitoring/help/read-me-complete.html No Types Assigned	https://www.manageengine.com/network-monitoring/help/read-me-complete.html Vendor Advisory
Changed	Reference Type	https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125 No Types Assigned	https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125125 Vendor Advisory
Added	CWE		NIST CWE-200
Added	CPE Configuration		OR cpe:2.3:a:zohocorp:manageengine_opmanager::::::::* versions up to (including) 12.3 cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:-::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124000::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124011::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124012::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124013::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124014::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124015::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124016::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124022::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124023::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124024::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124025::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124026::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124027::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124030::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124033::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124037::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124039::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124040::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124041::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124042::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124043::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124051::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124053::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124054::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124056::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124058::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124065::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124066::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124067::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124069::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124070::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124071::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124072::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124074::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124075::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124081::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124082::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124085::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124086::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124087::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124089::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124095::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124096::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124097::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124098::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124099::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124100::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124101::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124102::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124168::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124169::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124175::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124176::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124178::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124181::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124182::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124183::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124189::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124190::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.4:124191::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125000::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125002::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125100::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125101::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125102::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125108::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125110::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125111::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125112::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125113::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125114::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125116::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125117::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125118::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125120::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125121::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125123::::::* cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:125124::::::*

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-12116 is associated with the following CWEs:

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-12116 weaknesses.

CAPEC-64: Using Slashes and URL Encoding Combined to Bypass Validation Logic Using Slashes and URL Encoding Combined to Bypass Validation Logic CAPEC-76: Manipulating Web Input to File System Calls Manipulating Web Input to File System Calls CAPEC-78: Using Escaped Slashes in Alternate Encoding Using Escaped Slashes in Alternate Encoding CAPEC-79: Using Slashes in Alternate Encoding Using Slashes in Alternate Encoding CAPEC-126: Path Traversal Path Traversal